Detecting SQL Injection

Arch Capital is reviewing user-supplied text before it reaches a security filter. Write a function that detects whether an input string contains likely SQL injection patterns.

Given a string text, return True if it contains a suspicious SQL injection pattern, otherwise return False.

A string is considered suspicious if, after lowercasing it, it contains any of the following:

1. A SQL comment marker: --, /*, or */
2. A statement separator: ;
3. A tautology pattern such as or 1=1 or or '1'='1'
4. A SQL keyword sequence commonly used in injection attempts, such as union select, drop table, or insert into

Treat repeated spaces, tabs, and newlines as whitespace. Matching should be case-insensitive.